CVE-2022-23743

CVE-2022-23743 describes two privilege escalation vulnerabilities affecting Check Point ZoneAlarm, specifically versions prior to 15.8.200.19118 and 15.8.211.192119 respectively. A local attacker can exploit these flaws during the upgrade process or by leveraging weak permissions in the update directory to achieve arbitrary file write and execute code as a local system. With a CVSS score of 7.8 (High), this vulnerability poses a significant risk due to its low attack complexity and high impact on confidentiality, integrity, and availability. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE.